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INTEGRATED VULNERABILITY RISK MANAGEMENT AND IT RISK 
AND COMPLIANCE WITH QUALYSGUARD® AND MODULO 


Understanding overall security and compliance risk is an integral part of a risk management program. The integration of security 
and compliance solutions has provided some insight to understanding this risk, but lack true security risk as organizations are 
challenged with hundreds or even thousands of vulnerability detections every day. With Modulo Risk Manager, QualysGuard 
Vulnerability Management data is tightly integrated into the risk management program, allowing vulnerability risk to be correlated 
with other risks, controls, and assets providing a holistic management perspective of the most important risks. 
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Integration Benefits 


e Asset Synchronization and Correlation: Schedule import of assets from QualysGuard Vulnerability Management to 
constantly keep your asset management module updated with new assets and vulnerabilities. In addition, correlate these assets 
with other business assets in Modulo to understand business risk. 


e Holistic IT Risk Approach: QualysGuard Vulnerability Management data is automatically collected and integrated into the 
risk management program, allowing vulnerability risk to be correlated with other risks, controls, and assets, providing a holistic 
management perspective of the most important risks. In addition, the Risk Score, the formula used to calculate the risk score for 
vulnerabilities, can be customized using the following variables: 

— Asset Criticality 

— Asset Relevance 

— CVSS Score 

— Vulnerability Level 
Vulnerability Type 


e Prioritize Remediation: This integration allows customers to prioritize not only compliance risks, but also security risks to 
manage remediation efforts across the organization, prioritize large amounts of vulnerability data using a mature and reliable 
approach, produce compliance documentation and make more accurate decisions. 


Integrated Vulnerability Risk Management and IT Risk and Compliance with QualysGuard® and Modulo 


Modulo provides a simple mechanism for importing asset and vulnerability data into Modulo Risk Manager. This unique integration 
allows customers to prioritize not only compliance risks, but also vulnerability risks to manage remediation efforts across the 
organization, prioritize large amounts of vulnerability data using a mature and reliable approach, and make better decisions through 


accurate correlations. 
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About Modulo 

Modulo is a leading global enterprise provider of comprehensive Governance, 
Risk and Compliance (GRC) management solutions. Modulo’s award-winning Risk 
Manager™ provides hundreds of organizations worldwide with the tools they 
need to automate the entire GRC management process to monitor, manage and 
sustain adherence to policy and regulations while reducing enterprise risk and 
complexity. Customers span the financial, health care, retail, telecom, power & 
gas and government sectors and include BASF, BC Hydro, Commercial Bank of 
Dubai, Microsoft, New York University Medical Center, Synovus Financial, and 
Schlumberger. Modulo Risk Manager has earned “Best Buy” and “5-Star” ratings 
in SC Magazine’s 2011 Risk Management group product review and is the winner 
of the 2011 & 2010 Info Security Products Guide Global Excellence Award, 2010 
Network Products Guide Product Innovation Award and 2011 & 2010 SC 
Magazine Excellence Award Finalist. 


For more information, visit www.modulo.com. 
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Qualys is a global company with offices around the world. To find an office near you, visit 
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About Qualys 

Qualys, Inc. is the leading provider of Softare-as-a-Service (SaaS) IT security risk 
and compliance management solutions — delivered as a service. Qualys solutions 
are deployed in a matter of hours anywhere in the world, providing customers an 
immediate and continuous view of their security and compliance postures. 


The QualysGuard® service is used today by more than 5,000 organizations in 85 
countries, including 47 of the Fortune Global 100, and performs more than 500 
million IP audits per year. Qualys has the largest vulnerability management 
deployment in the world at a Fortune Global 50 company, and has been recog- 
nized by leading industry analysts for its market leadership. Qualys was named 
Best Security Company in the 2011 SC Awards U.S. 


Qualys has established strategic agreements with leading managed service pro- 
viders and consulting organizations including BT, Etisalat, Fujitsu, IBM, I(TS)2, 
LAC, NTT, SecureWorks, Symantec, Tata Communications and TELUS. Qualys is 
a founding member of the Cloud Security Alliance (CSA). 


For more information, visit www.qualys.com. 
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